Lucene search
+L

6178 matches found

AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.2 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: dax: fix an issue where overflowing extents beyond the inode size occurs during partial writing. The daxiomaprw function does two things in each iteration: it maps the written blocks and copies user data to those blocks. If...

5.5CVSS6.2AI score0.0024EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.2 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Nilfs2: Fixed missing cleanup operations during rollforward recovery processes. During an error injection test of a routine for mount-time recovery, KASAN identified a use-after-free bug. It turned out that if data recovery wa...

7.8CVSS6.2AI score0.00251EPSS
SaveExploits0References3
Apache Tomcat
Apache Tomcat
added 2025/02/10 12:0 a.m.30 views

Fixed in Apache Tomcat 10.1.35

Important: Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet - CVE-2025-24813 The original implementation of partial PUT used a temporary file based on the user provided file name and path with the path separator...

10CVSS9.2AI score0.99925EPSS
SaveExploits48Affected Software1
Apache Tomcat
Apache Tomcat
added 2025/02/10 12:0 a.m.35 views

Fixed in Apache Tomcat 9.0.99

Important: Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet - CVE-2025-24813 The original implementation of partial PUT used a temporary file based on the user provided file name and path with the path separator...

10CVSS9.2AI score0.99925EPSS
SaveExploits48Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.19 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-47674)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47674 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings...

7.8CVSS6.1AI score0.00246EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.12 views

Azure Linux 3.0 Security Update: mysql (CVE-2024-21237)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21237 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication GCS. Supported...

2.2CVSS6.1AI score0.0071EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.14 views

Azure Linux 3.0 Security Update: mariadb / mysql (CVE-2024-21096)

The version of mariadb / mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21096 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Client: mysqldump. Supported...

4.9CVSS5.8AI score0.00424EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/10 12:0 a.m.9 views

Azure Linux 3.0 Security Update: mysql (CVE-2024-21231)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21231 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that...

3.1CVSS6.1AI score0.00873EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/07 5:51 p.m.13 views

CVE-2024-13699

The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter in all versions up to, and including, 1.8.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...

6.4CVSS5.7AI score0.00365EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/07 9:35 a.m.20 views

Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to multiple issues due to IBM Runtime Environment Java Technology Edition Version 8

Summary There are vulnerabilities in IBM Runtime Environment Java Technology Edition Version 8 used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21217 DESCRIPTION:...

5.3CVSS6AI score0.01149EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2025/02/06 4:42 p.m.16 views

graalvm: unauthorized ability to cause a partial denial of service

A vulnerability was found in GraalVM and Mandrel Community Edition. Successful attacks of this vulnerability can result in the unauthorized ability to cause a partial denial of service partial DOS...

3.7CVSS7.1AI score0.00564EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/02/06 3:14 a.m.10 views

CVE-2021-35689

A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This high severity potential vulnerability allows attackers to perform remote code execution on Taleo Enterprise Edition system. Successful attacks of this vulnerability can result in unauthorized remote...

9.8CVSS6.9AI score0.02117EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:20 a.m.20 views

CVE-2022-21590

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Core Formatting API. Supported versions that are affected are 5.9.0.0, 6.4.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

7.6CVSS6.8AI score0.00663EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:15 a.m.12 views

CVE-2022-21424

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Connection Manager. The supported version that is affected is 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to...

8.3CVSS7AI score0.01283EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 1:12 a.m.9 views

CVE-2022-21516

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Manager Install. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.3CVSS6.4AI score0.00698EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 12:59 a.m.15 views

CVE-2022-21542

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Web Runtime. Supported versions that are affected are 9.2.6.3 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne...

7.4CVSS6.7AI score0.0064EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/02/05 9:9 p.m.24 views

MobSF Partial Denial of Service (DoS)

Partial Denial of Service DoS Product: MobSF Version: v4.2.9 CWE-ID: CWE-1287: Improper Validation of Specified Type of Input CVSS vector v.4.0: 6.9 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS vector v.3.1: 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Description: DoS in the Scans...

4.8CVSS5.9AI score0.00456EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2025/02/05 9:9 p.m.11 views

GHSA-JRM8-XGF3-FWQR MobSF Partial Denial of Service (DoS)

Partial Denial of Service DoS Product: MobSF Version: v4.2.9 CWE-ID: CWE-1287: Improper Validation of Specified Type of Input CVSS vector v.4.0: 6.9 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS vector v.3.1: 6.5 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Description: DoS in the Scans...

7.1CVSS5.9AI score0.00456EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/02/05 6:41 p.m.30 views

CVE-2025-24804 Partial Denial of Service (DoS) in MobSF

Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing, malware analysis and security assessment framework. According to Apple's documentation for bundle ID's, it must contain only alphanumeric characters A–Z, a–z, and 0–9, hyphens -, and...

4.8CVSS0.00456EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/05 3:51 p.m.15 views

CVE-2020-14611

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

8.6CVSS6.9AI score0.01471EPSS
SaveExploits0
Rows per page
Query Builder